CVE-2022-37017

CVE-2022-37017 Authentication bypass for Symantec Endpoint Protection 14.3.5351 Client User Interface Password Symantec Endpoint Protection allows setting a password protection on its UI to prevent configuration changes. This password check in implemented by logic that is neither in a Protected...

protections-artifacts

Artefactos de Protección Elastic Security previene ransomware y malware, detecta amenazas avanzadas y brinda a los respondedores un contexto vital. Es gratuito y abierto, listo para cada endpoint. Protections-Artifacts es el hogar de nuestra lógica de detección reglas, yara, etc. para Elastic...

umap

umap - the USB host security assessment tool Based on Facedancer by Travis Goodspeed: http://goodfet.sourceforge.net/hardware/facedancer21/ Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Andy Davis, andy dot davis at nccgroup dot com...

cve-2019-12750

Symantec Local Privilege Escalation - CVE-2019-12750 Based on the excellent writeup by Kyriakos Economou: https://labs.nettitude.com/blog/cve-2019-12750-symantec-endpoint-protection-local-privilege-escalation-part-1/ Only x64 and older Windows versions are supported for now...

SEP-14.2-Arbitrary-Write

Exploit CVE-2020-5837 El análisis se puede encontrar en el blog de RedyOps Labs: https://labs.redyops.com/index.php/2020/04/27/symantec-endpoint-protection-sep-14-2-eop-via-arbitrary-write/ Herramientas de Terceros Este código de exploit se basa en gran medida en symboliclink-testing-tools, que f...

CVE-2017-16245

CVE-2017-16245 Código fuente para CVE-2017-16245 bypass de Avecto Defendpoint originalmente divulgado por Nettitude La implementación en PowerShell de CVE-2017-16245 puede y debe copiarse y pegarse directamente en PowerShell. Si PowerShell está bloqueado, intente ejecutar powershell.exe desde el...

SEPM-EoP

Summary Product Name : Symantec Endpoint Protection Manager Version 14 14 MP1 .2 build 1023 14.2.1023.0100 - older versions may also be affected Impact : High. A standard windows user not an admin can escalate to NT SERVICE\semwebsrv . With this user role he has access to many of the SEPM...

CVE-2026-74983

Mitigation bypass in the Data Loss Prevention component. This vulnerability was fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint...

CVE-2025-60357

AhnLab EPP Management v1.0.14.32-6249 is affected by a NoSQL (MongoDB) injection in the endpoint /api/console/ems/eventlog/agentEvent/list, disclosed as CVE-2025-60357. The root cause is injectable MongoDB queries allowing disclosure of sensitive information/PII via the eventlog/agentEvent/list i...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

CVE-2026-11626 Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

CleanWipe Removal Tool macOS, prior to 16.0.0.65, may be susceptible to an Local Privilege Escalation vulnerability, which is a type of issue whereby an attacker with limited privilege access on an affected system can escalate their privileges to gain administrative control...

Malwarebytes EDR 数字错误漏洞

Malwarebytes EDR is a terminal detection and response platform provided by the American company Malwarebytes. Version 1.0.11 of Malwarebytes EDR contains a vulnerability related to input validation. This vulnerability arises from truncating data exceeding 4GB during computing hash calculations,...

CVE-2026-34927

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2026-45207

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-45206 but exists in a different process protection communication mechanism. Please note: an attacker must first obtain the abilit...

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection

As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh consecutive time, Microsoft has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. We believe this reflects both the...

Microsoft is named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection

As threats become more coordinated and faster to execute, endpoint protection has become the proving ground for modern defense. For the seventh consecutive time, Microsoft has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. We believe this reflects both the...

CVE-2026-34927

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2026-45207

Technical details about CVE-2026-45207 are not publicly available in the provided documents. No specifics on affected components, root cause, impact, or fixes are included. Monitor for updates from vendors and authorities.

EUVD-2026-31286

An origin validation vulnerability in the Apex One/SEP agent could allow a local attacker to escalate privileges on affected installations. This is similar to CVE-2026-34927 but exists in a different named pipe communication mechanism. Please note: an attacker must first obtain the ability to...